# CVEs published 2009-11-13

12 CVEs were published on November 13, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-3936](https://cve.now/CVE-2009-3936.md): Unspecified vulnerability in Citrix Online Plug-in for Windows 11.0.x before 11.0.150 and 11.x before 11.2, Online Plug-in for Mac before 11 (no CVSS)
- [CVE-2009-3937](https://cve.now/CVE-2009-3937.md): Memory leak in Solaris TCP sockets in Sun OpenSolaris snv\_106 through snv\_126 allows local users to cause a denial of service (kernel memory (no CVSS)
- [CVE-2009-3938](https://cve.now/CVE-2009-3938.md): Buffer overflow in the ABWOutputDev::endWord function in poppler/ABWOutputDev.cc in Poppler (aka libpoppler) 0.10.6, 0.12.0, and possibly ot (no CVSS)
- [CVE-2009-1570](https://cve.now/CVE-2009-1570.md): Integer overflow in the ReadImage function in plug-ins/file-bmp/bmp-read.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary c (no CVSS)
- [CVE-2009-2678](https://cve.now/CVE-2009-2678.md): Unspecified vulnerability in Open System Services (OSS) Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08, an (no CVSS)
- [CVE-2009-2816](https://cve.now/CVE-2009-2816.md): The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195. (no CVSS)
- [CVE-2009-2841](https://cve.now/CVE-2009-2841.md): The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before (no CVSS)
- [CVE-2009-2842](https://cve.now/CVE-2009-2842.md): Apple Safari before 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote attackers t (no CVSS)
- [CVE-2009-3384](https://cve.now/CVE-2009-3384.md): Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, c (no CVSS)
- [CVE-2009-3565](https://cve.now/CVE-2009-3565.md): Multiple cross-site scripting (XSS) vulnerabilities in intruvert/jsp/module/Login.jsp in McAfee IntruShield Network Security Manager (NSM) b (no CVSS)
- [CVE-2009-3566](https://cve.now/CVE-2009-3566.md): McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the sess (no CVSS)
- [CVE-2009-3676](https://cve.now/CVE-2009-3676.md): The SMB client in the kernel in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-11-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.